v0.13.2Control flow and dataflow are rebuilt on explicit semantics, Z3 translation matches executable C# numeric rules, and the build chain is hermetic and supply-chain verified with hash- and size-pinned Z3 binaries.See what's new

import

Generate effect manifests from a NuGet package or assembly without treating unresolved members as pure

Bash
calor import <package-or-dll> [options]

calor import analyzes a package's public surface and writes an effect manifest. A NuGet package must already be restored into the global packages folder; a direct .dll path is also accepted.

Examples

Bash
calor import Serilog --project .
calor import Serilog --version 4.3.0 --project .
calor import path/to/My.Library.dll --references path/to/dependencies
calor import MediatR --json

Options

OptionDescription
--versionPackage version; defaults to the highest restored version
--references, -rExtra assembly files or directories for call-chain resolution
--project, -pProject directory used to load project-local manifests and place default output
--solution, -sSolution directory used to load solution-level manifests
--output, -oEffect manifest path; defaults to <package>.calor-effects.json
--no-contractsSkip mechanical contract annotation synthesis
--jsonEmit one schema 2.0 envelope to stdout instead of writing files

Honest Three-Tier Classification

TierResult
DerivedComplete concrete IL chains are emitted with inferred provenance
CuratedExisting reviewed manifests are reported as already covered
UnresolvedMembers are listed with a reason and excluded from output (Calor1351)

Classification is per type/member/kind group. If any overload remains unresolved, that member is not emitted as pure. Nothing generated by this command carries verified confidence.

When enabled, contract synthesis writes a sibling <package>.calor-contracts.json file. Every fact has assumed provenance and is annotation-only: the verifier does not trust the file and it can never produce proven or remove a runtime check (Calor1353).

Use the Adoption Playbook for the complete dependency-onboarding workflow.